
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32302d3230203d3e203536303438.roa
File: 3231312e3134342e3134342e302f32302d3230203d3e203536303438.roa (raw, json)
Hash identifier: D3/Zjd0UpPc/B5orUmfpzmGXhvK/uZnF1N+c3jezNCE=
Subject key identifier: F2:C5:06:6C:A5:21:75:E7:BA:C0:2E:E8:FA:29:16:62:43:5C:A6:80
Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial: 7E92AE2EA8D0D8AEB870BCEE2BAD2E3A42A353FF
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32302d3230203d3e203536303438.roa
Signing time: Fri 18 Sep 2026 02:58:40 +0000
ROA not before: Fri 18 Sep 2026 02:53:40 +0000
ROA not after: Fri 17 Sep 2027 02:58:40 +0000
asID: 56048
IP address blocks: 211.144.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 11:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:92:ae:2e:a8:d0:d8:ae:b8:70:bc:ee:2b:ad:2e:3a:42:a3:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Validity
Not Before: Sep 18 02:53:40 2026 GMT
Not After : Sep 17 02:58:40 2027 GMT
Subject: CN=F2C5066CA52175E7BAC02EE8FA291662435CA680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:11:52:72:45:0a:16:17:ce:0d:17:e6:17:
78:37:0c:1f:c5:89:b9:f5:bf:4f:3a:bc:e5:15:c3:
df:85:9d:69:2b:c5:d4:74:aa:93:6c:ae:3c:2d:e4:
51:3a:b8:55:2e:ed:e4:a9:3f:8d:39:c4:ca:42:35:
2a:9d:3b:f7:5e:fe:3d:5a:e8:04:43:93:55:e4:c1:
57:c0:3b:c5:b0:45:71:fd:68:30:e0:7d:bf:9e:cf:
89:21:b1:63:c5:de:82:17:26:86:18:32:9f:65:de:
94:31:3c:47:53:0d:5b:72:5a:11:f7:9d:7a:3b:1d:
1c:6f:16:13:31:fd:15:ac:14:5a:59:1d:64:f5:05:
f1:e8:85:18:0f:2d:63:41:1e:a1:2f:f2:ca:58:27:
21:5d:25:81:70:6e:3b:db:8f:60:1f:96:b4:a0:4a:
b3:f8:64:d9:19:59:17:49:e0:1d:42:19:c2:43:d4:
ee:9b:82:5a:28:f4:4e:5e:1c:e1:4a:33:20:89:af:
5a:ac:c9:b5:af:fb:5a:ca:59:dc:f9:38:b8:82:04:
55:5b:d1:d1:07:2f:cd:63:7e:b2:bf:d3:f9:48:e3:
6b:ef:3e:f8:e6:d8:c0:27:48:0b:d9:a5:2a:39:1b:
87:44:d5:d6:25:81:92:20:05:2e:88:e9:d7:59:7d:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:06:6C:A5:21:75:E7:BA:C0:2E:E8:FA:29:16:62:43:5C:A6:80
X509v3 Authority Key Identifier:
keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3231312e3134342e3134342e302f32302d3230203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:69:ab:e6:e9:41:78:d1:19:a4:a7:1d:51:c8:57:8a:89:d9:
1a:94:f5:16:e8:83:63:ef:5f:42:39:33:e0:5e:cb:80:8d:e1:
24:fa:8b:f6:7c:3b:9a:08:34:30:fa:cc:30:de:d0:7d:d5:95:
7d:f6:f5:9a:10:d9:2a:4c:38:e3:4f:fd:72:54:c6:37:98:bc:
19:d3:87:16:e8:41:41:ad:07:66:3a:fe:1b:f3:c8:69:15:0c:
aa:9b:99:40:f3:bc:49:ca:00:ef:47:1b:66:d6:a4:e1:43:4e:
82:6f:e2:7f:9b:f6:d3:ee:b5:a5:83:6b:19:f3:76:92:5a:0a:
87:db:4a:7a:56:f1:43:49:35:5d:f0:35:7c:50:24:03:c3:6a:
d9:f3:63:1b:24:a6:9e:eb:c7:fe:15:d5:c4:e7:e4:62:eb:cc:
21:8b:d2:52:84:ff:ea:25:35:73:99:f2:6e:f2:5a:c7:5b:82:
b6:49:a4:eb:a6:93:ff:69:c0:c6:c7:fa:f6:9c:bb:bd:0e:8a:
eb:f8:84:db:fc:dc:67:ca:3a:63:43:89:e5:7d:d8:ec:fe:c7:
7d:98:7d:61:d0:3c:55:bf:09:57:a7:7b:9e:71:db:6c:40:6a:
a2:50:f5:fa:f8:4a:19:ac:31:b7:c4:0a:16:93:fd:10:96:d5:
e9:3b:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:28:40 2026 by rpki-client